security fixes are made for the latest release on the releases page.

please do not open a public issue for a suspected vulnerability. instead, email me@zimengxiong.com with a clear description, steps to reproduce it, and any relevant logs or proof of concept.

you should receive an acknowledgement within seven days. if the report is confirmed, a fix and release timeline will be shared privately before public disclosure.